Unauthorized data disclosure in Oracle MySQL Connector/J (the official MySQL JDBC driver) versions 9.7.0 through 9.7.1 allows a low-privileged attacker with network access to compromise confidentiality, with a scope change that lets the attack significantly impact additional products beyond the connector itself. Fixed in the Oracle Critical Patch Update of July 2026 and tagged as an authentication bypass, the flaw carries a CVSS 3.1 score of 7.7 with high confidentiality impact and no integrity or availability effect. No public exploit identified at time of analysis, and there is no CISA KEV or EPSS signal in the provided data.
Information disclosure in Oracle SOA Suite (Integration Business Insight component), versions 12.2.1.4.0 and 14.1.2.0.0, allows a low-privileged attacker with HTTP network access to gain unauthorized access to all SOA Suite-accessible critical data, with a scope change that may significantly impact additional connected products. Oracle rates this CVSS 3.1 7.7 (High) with confidentiality-only impact and no integrity or availability effect. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; the 'Authentication Bypass' tag hints at auth-weakening behavior but the CVSS vector confirms some privilege (PR:L) is still required.
Unauthorized data manipulation in Oracle Advanced Benefits 12.2.15 (Oracle E-Business Suite, Internal Operations component) lets a low-privileged attacker with HTTP network access create, delete, or modify critical data. Because the CVSS vector carries a scope change (S:C), successful attacks can significantly impact additional products beyond Advanced Benefits itself. The flaw is rated CVSS 3.1 7.7 with integrity-only impact (I:H, C:N, A:N); no public exploit is identified at time of analysis, and it was disclosed via Oracle's July 2026 Critical Patch Update.
Privileged tampering and data disclosure in the Oracle Identity Manager Connector (PeopleSoft Applications component) of Oracle Fusion Middleware 12.2.1.4.0 and 14.1.2.1.0 lets a high-privileged, network-based attacker read, create, delete, or modify all connector-accessible data, with a scope change that can significantly impact additional products beyond the connector itself. The CVSS 3.1 base score is 7.7 (C:H/I:H/A:N), but exploitation is rated high-complexity and requires existing high privileges, so this is not a drive-by flaw. No public exploit identified at time of analysis and it is not listed in CISA KEV.
Server-side request forgery in InternLM lmdeploy's OpenAI-compatible vision API server lets unauthenticated remote attackers coerce the server into fetching internal-only resources by abusing the image_url media-fetch path. Because the URL safety check validates only the initial URL and does not re-validate targets after an HTTP 302 redirect, an attacker-hosted endpoint can redirect the fetch to loopback services or cloud instance-metadata endpoints, exposing internal services and potentially cloud credentials. No public exploit is identified at time of analysis, EPSS is low (0.28%), and a vendor fix adding a media-domain allowlist is available.
Unauthorized disclosure of critical data in Oracle Payroll (Oracle E-Business Suite, Internal Operations component), versions 12.2.3 through 12.2.15, lets a low-privileged attacker with HTTP network access read all Payroll-accessible data. Because the flaw carries a scope change, successful attacks can significantly impact additional Oracle products beyond Payroll itself, raising the effective blast radius. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; Oracle rates it CVSS 3.1 7.7 with confidentiality-only impact.
Sensitive data exposure in Oracle iSupport (Oracle E-Business Suite, Internal Operations component) versions 12.2.3 through 12.2.15 allows a low-privileged, network-adjacent attacker to obtain unauthorized access to all iSupport-accessible data over HTTP. Because the flaw carries a scope change, successful exploitation may also significantly impact other products beyond iSupport itself, though only confidentiality is affected (no integrity or availability impact). There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; the vendor tags it as an authentication-bypass class issue.
Information disclosure with scope change in Oracle Service Delivery Platform (Fusion Middleware, Messaging Enabler component) versions 12.2.1.4.0 and 14.1.2.0.0 lets a low-privileged remote attacker read all data accessible to the platform and impact additional connected products. The flaw is network-exploitable over HTTP with low attack complexity and only minimal existing privileges, and Oracle tags it as an authentication bypass affecting confidentiality only (no integrity or availability impact). No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low exploitation barrier and cross-boundary scope change make it a meaningful risk in exposed telecom/messaging deployments.
Information disclosure with scope change in Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1, Application Service Level Management component) lets a low-privileged, network-authenticated attacker read all data accessible to the platform over HTTPS. Oracle rates it CVSS 3.1 7.7 with a scope change, so a successful attack can significantly impact products beyond Enterprise Manager itself. No public exploit is identified at time of analysis and it is not in CISA KEV, but low attack complexity plus total confidentiality loss make it a meaningful priority in Oracle-managed estates.
Cross-context data compromise in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0 lets a low-privileged, network-reachable attacker read and alter critical data after tricking a legitimate user into interacting with malicious content. Because the flaw crosses a security scope boundary (S:C), successful attacks can significantly impact products beyond WebCenter Content itself. Disclosed in Oracle's July 2026 Critical Patch Update with a CVSS 3.1 base score of 7.7; no public exploit identified at time of analysis.
Unauthorized data disclosure in Oracle HRMS (UK) UK Payroll component of Oracle E-Business Suite 12.2.3 through 12.2.15 allows a low-privileged, authenticated remote attacker over HTTP to read all HRMS (UK)-accessible data, with a scope change that can significantly impact additional products beyond the vulnerable module. Rated CVSS 3.1 7.7 (High) for confidentiality-only impact, it was reported by Oracle and patched in the July 2026 Critical Patch Update; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data access in Oracle E-Business Suite HRMS (Norway) allows a low-privileged remote attacker to read all HRMS-accessible data over HTTP, with a scope change that may significantly impact other integrated products. The flaw affects EBS releases 12.2.3 through 12.2.15 and is addressed in Oracle's July 2026 Critical Patch Update. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the confidentiality-only, network-exploitable nature nonetheless makes it a meaningful data-exposure risk in HR environments.
Server-side request forgery in Gitea before 1.27.0 lets attackers coerce the server into HTTP requests against internal hosts because its outbound IP allow-list classifier (IsGlobalUnicast && !IsPrivate) fails to block CGNAT (100.64.0.0/10) and nine IPv6 transition prefixes. An authenticated user can point a webhook or repo migration at an internal CGNAT service and read the full response (status, headers, and up to 1 MB body) rendered back on the hook detail page; separately, when OpenID sign-in is enabled the unauthenticated /user/login/openid discovery fetch uses http.DefaultClient with no IP filtering, giving anonymous internet callers a blind SSRF primitive. Publicly available exploit code exists (bundled run_poc.sh reproduces all three primitives), but no active exploitation is confirmed.
Root command injection in dracut's NetworkManager-based initrd network module allows an adjacent-network attacker to execute arbitrary code inside the initramfs during early boot. By answering a booting system's DHCP request with malicious root-path, next-server, or bootfile-name options, the attacker's payload is written unescaped into a temporary shell script and executed as root before the real OS starts. No public exploit is identified at time of analysis, and the flaw is not on CISA KEV, but a Red Hat advisory (RHSA-2026:26534) and upstream fix commit confirm the issue is real and patched.
Unauthorized data access and partial denial of service in Oracle Transportation Management 6.5.3 (CSV Management component) allow a low-privileged, network-authenticated attacker over HTTP to read all OTM-accessible data, perform limited unauthorized inserts/updates/deletes, and partially degrade availability. Rated CVSS 3.1 7.6 (High). No public exploit identified at time of analysis; the fix ships in Oracle's July 2026 Critical Patch Update.
Data tampering and partial denial-of-service in Oracle Production Scheduling (Oracle E-Business Suite, Internal Operations component) versions 12.2.3 through 12.2.15 lets a low-privileged, network-authenticated attacker over HTTP create, delete, or modify critical data - with additional limited read access and a partial DoS. Oracle rates it CVSS 3.1 7.6, driven primarily by high integrity impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so this is a patch-during-normal-cycle priority rather than an emergency.
Privileged data compromise in Oracle Advanced Planning Command Center (Oracle E-Business Suite Internal Operations component, versions 12.2.3 through 12.2.15) lets an already high-privileged attacker with network HTTP access read all APCC-accessible data and perform limited unauthorized modifications. Because the flaw carries a scope change, successful attacks may significantly impact additional products beyond APCC itself. Disclosed in Oracle's July 2026 Critical Patch Update with a CVSS 3.1 base score of 7.6; no public exploit identified at time of analysis.
Privilege-abusing data compromise in Oracle Advanced Benefits 12.2.15 (a module of Oracle E-Business Suite, Internal Operations component) lets a high-privileged, network-authenticated attacker read all data accessible to the application and make limited unauthorized modifications. Because the flaw carries a scope change (CVSS S:C), successful attacks may extend impact to other Oracle products beyond Advanced Benefits itself. There is no public exploit identified at time of analysis and the issue is not in CISA KEV; the fix is delivered in the Oracle July 2026 Critical Patch Update.
Privilege-abuse compromise in the Oracle Enterprise Command Center Framework (Core component) of Oracle E-Business Suite V16 allows an authenticated high-privileged attacker with HTTP network access to read all framework-accessible data and make limited unauthorized modifications, with a scope change that can significantly impact adjacent Oracle products. Addressed in the July 2026 Oracle Critical Patch Update (CVSS 3.1 base 7.6). No public exploit identified at time of analysis and it is not listed in CISA KEV, so this reflects an unauthenticated-attacker-excluded, insider/compromised-account risk rather than mass exploitation.
Privilege abuse in the Console component of Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 lets a high-privileged, network-based attacker corrupt or delete critical data and read a subset of data, with a scope change that can impact other products beyond WebLogic itself. Oracle rates it CVSS 3.1 7.6 and, despite the 'Authentication Bypass' tag applied by the reporter, the CVSS vector requires PR:H (high existing privileges). No public exploit identified at time of analysis and it is not listed in CISA KEV; disclosed in the Oracle Critical Patch Update of July 2026.
Unauthorized data access and partial denial of service in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0 lets a remote, unauthenticated attacker compromise the platform after tricking a legitimate user into interacting with attacker-controlled content. Per Oracle's July 2026 Critical Patch Update, successful exploitation yields high confidentiality impact (complete read access to WebCenter Content data) plus limited integrity and availability damage. No public exploit has been identified at time of analysis and it is not listed in CISA KEV, though Oracle rates it easily exploitable.
Sensitive data compromise in Oracle Agile Product Lifecycle Management for Process 6.2.4 (Product Quality Management component) lets a low-privileged, network-authenticated attacker read all application-accessible data and make limited unauthorized modifications, with a scope change that can significantly impact additional products. Oracle rates it easily exploitable but it requires tricking a separate user into interaction (UI:R), yielding a CVSS 3.1 base score of 7.6. No public exploit identified at time of analysis and it is not listed in CISA KEV.
Cross-context data compromise in Oracle Commerce Platform 11.4.0 (Dynamo Application Framework/ATG) lets a low-privileged, authenticated network attacker who lures a victim into interacting with crafted HTTP content read all platform-accessible data and make limited unauthorized modifications, with impact crossing into additional products via a scope change. The CVSS:3.1 score is 7.6 (C:H/I:L, scope-changed), and the UI:R plus scope-change profile is characteristic of a stored/reflected web-injection class flaw. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Compromise of Oracle Work in Process, a manufacturing module of Oracle E-Business Suite (versions 12.2.3 through 12.2.15, Internal Operations component), allows a low-privileged authenticated attacker with HTTP network access to read all data accessible to Work in Process and to alter some of it, with a scope change that can significantly impact additional Oracle products. Exploitation is rated easy by Oracle but requires human interaction from a victim other than the attacker (UI:R), pointing to a social-engineering or cross-user trigger. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; the fix ships in the Oracle Critical Patch Update of July 2026.
Cross-context data compromise in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0 allows a low-privileged authenticated attacker with HTTP network access to gain unauthorized read access to all WebCenter Content data and limited write access, provided a separate victim user is tricked into an interaction. Because the CVSS scope is changed (S:C), a successful attack can significantly impact resources beyond WebCenter Content itself, consistent with a stored/reflected injection-style flaw served through the content platform. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the vulnerability was reported by Oracle and patched in the July 2026 Critical Patch Update.
Unauthorized data compromise in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0 allows a remote unauthenticated attacker to gain access to critical data and cause limited data tampering and partial denial of service, provided a legitimate user is tricked into interacting with the attack. The flaw carries a CVSS 3.1 score of 7.6 and was disclosed in Oracle's July 2026 Critical Patch Update; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Denial of service in the Netty network framework (4.2.0.Final-4.2.15.Final and 4.1.0.Final-4.1.135.Final) lets a remote unauthenticated peer exhaust JVM direct memory and crash the process. Applications that enable HTTP/2 content decompression via DelegatingDecompressorFrameListener leak one direct ByteBuf for every HTTP/2 DATA frame delivered to a stream whose decompressor has already been closed, because Http2Decompressor.decompress(...) retains the buffer for writeInbound but never releases it on the error path. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; EPSS data was not provided.
Out-of-bounds read and write in the Zephyr RTOS Bluetooth Classic (BR/EDR) L2CAP signaling handlers (l2cap_br_conf_req/rsp) lets an unauthenticated peer within Bluetooth radio range corrupt host memory and crash the device, affecting released versions including v4.4.0. Because the handlers checked the whole-PDU length (buf->len) instead of the per-command length (len), a packed CONF_REQ with a tiny header length underflows opt_len to ~0xFFFF and walks the option-parsing loop past the pooled ACL receive buffer. No public exploit is identified at time of analysis; a vendor patch and GHSA advisory exist and EPSS/KEV data were not provided.
Denial-of-service in Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler component), versions 12.2.1.4.0 and 14.1.2.0.0, lets an unauthenticated remote attacker send crafted HTTP traffic that hangs or repeatedly crashes the service, producing a complete availability outage. Oracle rates it CVSS 3.1 7.5 with availability-only impact and flags it as easily exploitable. There is no public exploit identified at time of analysis and it is not on CISA KEV; no EPSS score was provided in the source data.
Denial-of-service in Oracle Coherence (Core component) of Oracle Fusion Middleware lets an unauthenticated attacker with TCP network access hang or repeatedly crash the in-memory data grid, producing a complete availability outage. Affected supported releases are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0; the CVSS 3.1 base score is 7.5 with a pure availability impact (A:H). Oracle rates it 'easily exploitable,' but there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Denial of service in Oracle Coherence (Core component) of Oracle Fusion Middleware allows a remote, unauthenticated attacker with TCP network access to trigger a hang or repeatable crash, producing a complete availability outage of the affected Coherence instance. It affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0, carries a CVSS 3.1 base score of 7.5 (availability-only), and is described by Oracle as easily exploitable. No public exploit identified at time of analysis and it is not listed in CISA KEV.
Denial-of-service in Oracle Coherence (Core component of Oracle Fusion Middleware) lets an unauthenticated attacker with TCP network access hang or repeatably crash the data-grid service, producing a complete availability outage. It affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 and is rated CVSS 3.1 7.5 (availability-only). Oracle labels it easily exploitable, but there is no public exploit identified at time of analysis and it is not on CISA KEV.
Denial of service in Oracle MySQL Connector/C++ (MySQL Connectors component) versions 9.7.0 through 9.7.1 allows an unauthenticated network attacker to trigger a hang or repeatable crash, causing a complete availability outage of the connector. The flaw is remotely and easily exploitable over multiple protocols with no user interaction, but has no confidentiality or integrity impact. No public exploit identified at time of analysis and it is not listed in CISA KEV.
Denial-of-service in Oracle Java SE 8u491 (and 8u491-perf) and 11.0.31 lets an unauthenticated remote attacker hang or repeatedly crash the JVM by feeding crafted input to the Scripting component's APIs, for example via a web service that passes data to those APIs. There is no confidentiality or integrity impact - only availability - but the attack is network-reachable, low-complexity, and requires no authentication or user interaction, yielding a CVSS 7.5. No public exploit identified at time of analysis and the flaw is not on CISA KEV.
Denial-of-service in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component, versions 22.3 through 26.5) allows an unauthenticated remote attacker to send crafted HTTPS traffic that hangs or repeatedly crashes the application, producing a complete availability loss. The flaw carries a CVSS 3.1 base score of 7.5 with pure availability impact and no confidentiality or integrity effect. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Denial-of-service via unbounded memory allocation and leak in the CImg C++ image-processing library affects all versions prior to 4.0.0. In _load_analyze(), a 4-byte attacker-controlled header_size field from an Analyze/NIfTI (.hdr/.img/.nii) file is passed straight to a heap allocation of up to ~4 GB with no check against real file size; when the subsequent short read throws a CImgIOException the buffer is never freed, leaking the full allocation on every call. No public exploit identified at time of analysis and no KEV/EPSS signals were provided, but a 6-byte crafted file reliably leaks ~1.3 GB per invocation, enabling memory-exhaustion DoS against any service that feeds untrusted files to CImg.
Unauthorized data access in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component, versions 22.3 through 26.5) lets a remote, unauthenticated attacker reach and read critical application data over HTTP. Oracle rates this CVSS 3.1 7.5 with confidentiality-only impact, and the intelligence tags flag it as an authentication-bypass class issue, so attackers can obtain complete access to all data accessible to the affected applications without credentials. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Unauthenticated data disclosure in Oracle HRMS (US) US Payroll module of Oracle E-Business Suite 12.2.7 through 12.2.15 allows a remote attacker to read all HRMS-accessible data over HTTP without credentials. Disclosed in Oracle's July 2026 Critical Patch Update and tagged as an authentication bypass, the flaw carries a CVSS 3.1 score of 7.5 with confidentiality-only impact and is easily exploitable. No public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data disclosure in the Oracle In-Memory Cost Management for Discrete Industries component (Internal Operations) of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows an unauthenticated, network-based attacker over HTTP to read critical or all data accessible to the product. The flaw is rated CVSS 3.1 7.5 with a pure confidentiality impact (C:H/I:N/A:N) and was disclosed in Oracle's July 2026 Critical Patch Update. No public exploit identified at time of analysis, though the 'Authentication Bypass' tag and low attack complexity make it an attractive target for internet-exposed EBS instances.
Unauthorized data disclosure in Oracle Agile PLM 9.3.6 (Security component) lets a remote, unauthenticated attacker reach critical business data over HTTP without any user interaction. The Oracle CPU (July 2026) and EUVD tagging characterize this as an authentication-bypass-class weakness yielding full read access to all Agile PLM-accessible data. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthorized data disclosure in Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 lets a remote, unauthenticated attacker read all data accessible to the Experience Manager component over HTTP. Oracle rates it CVSS 7.5 with high confidentiality impact and no integrity or availability effect, and the reporter tags it as an authentication bypass. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-facing, no-privilege profile makes it a straightforward information-disclosure risk.
Unauthorized data disclosure in Oracle Commerce Guided Search / Experience Manager 11.4.0 lets a remote unauthenticated attacker abuse the exposed RMI interface of the Experience Manager component to read critical or all Guided Search accessible data. Scored CVSS 3.1 7.5 with confidentiality-only impact and rated 'easily exploitable' by Oracle, though there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Disclosed in Oracle's July 2026 Critical Patch Update.
Unauthorized data disclosure in Oracle Commerce Guided Search / Experience Manager 11.4.0 lets a remote unauthenticated attacker reach sensitive data over HTTP, with Oracle and the EUVD entry tagging the flaw as an authentication bypass. The CVSS 3.1 base score of 7.5 reflects a high-confidentiality, no-integrity, no-availability impact, and Oracle labels it 'easily exploitable.' There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated network vector makes it a credible target once patch details are reverse-engineered.
Unauthorized data disclosure in Oracle Commerce Platform 11.4.0 lets a remote, unauthenticated attacker reaching the Dynamo Application Framework's LDAP integration read critical application data, potentially all data accessible to the platform. Oracle rates this CVSS 3.1 7.5 with confidentiality-only impact and describes it as easily exploitable. There is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS score in the provided data, so this is a serious-but-not-yet-weaponized disclosure flaw disclosed in the July 2026 Oracle Critical Patch Update.
Unauthorized data disclosure in Oracle PeopleSoft Enterprise SCM Manufacturing 9.2 (Security component) allows a remote, unauthenticated attacker with HTTP network access to read critical manufacturing and supply-chain data. Oracle rates the flaw as easily exploitable with a CVSS 3.1 base score of 7.5 (confidentiality-only impact), and vendor tagging associates it with an authentication-bypass class of issue. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated data disclosure in Oracle PeopleSoft Enterprise FIN Payables 9.2 (Security component) lets a remote attacker reach financial data over HTTP without credentials, yielding read access to critical or all data the Payables module can reach. The Oracle-supplied tag of 'Authentication Bypass' aligns with the CVSS PR:N vector, indicating the flaw circumvents access controls. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV, but its low complexity and network reach make it a credible target once details from the July 2026 CPU are studied.
Unauthorized data disclosure in Oracle PeopleSoft Enterprise SCM Order Management 9.2 (Security component) allows a remote, unauthenticated attacker with HTTPS network access to read critical or all data accessible to the application. Rated CVSS 3.1 7.5 (confidentiality-only), the flaw is described by Oracle as easily exploitable and is tagged as an authentication bypass. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Unauthorized data disclosure in Oracle PeopleSoft Enterprise SCM Inventory 9.2 (Security component) allows a remote, unauthenticated attacker to reach sensitive data over HTTPS without any user interaction. Oracle rates the flaw easily exploitable and it is tagged as an authentication bypass, meaning an attacker can obtain read access to all data accessible to the SCM Inventory application. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and lack of authentication make it a priority patch in the July 2026 Oracle Critical Patch Update.
Unauthenticated information disclosure in Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 (Purchasing component) lets a remote attacker read critical data over HTTP without any credentials, as disclosed in Oracle's Critical Patch Update of July 2026. Oracle rates it CVSS 7.5 with confidentiality-only impact (C:H/I:N/A:N) and characterizes it as easily exploitable. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthorized data disclosure in Oracle iRecruitment (Oracle E-Business Suite, Internal Operations component) versions 12.2.3 through 12.2.15 allows a remote, unauthenticated attacker to reach all data accessible to the iRecruitment application over HTTP. The CVSS 3.1 base score is 7.5 with confidentiality-only impact (C:H, I:N, A:N), and the intelligence tag characterizes it as an authentication bypass. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the network, no-auth, low-complexity vector makes it attractive for opportunistic scanning of internet-facing EBS deployments.